eEye Digital Security has a free scanning tool that detects the MIMAIL infections. We found 8 on our campus so far. http://www.eeye.com/html/Research/Tools/MyDoom.html
Jane Dumke Email Administrator University of Wisconsin - Stevens Point <mailto:[EMAIL PROTECTED]> phone:(715)346-2463 fax:(715)346-4577 ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pfefferkorn, Pete (pfeffepe) Sent: Wednesday, January 28, 2004 11:37 AM To: Exchange Discussions Subject: Tracking Viruses originator via log files? Exchange 5.5 running ScanMail. Got a stupid question. We run ScanMail which is intercepting the MiMail.R virus no problem. The issue we have is tracing it back to the machines that are actually sending it. Our campus is pretty large and tracing back infected machines is a challenge. I can physically go into the mail account that received the message and look at the header but I was wonder if there was an easier way using SMTP logs or something in Exchange to get that information. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=& lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
